Troubleshooting known issues¶
Custom resource profiles aren’t captured during in-place upgrades¶
When upgrading Anaconda Enterprise from a version that supports resource profiles to a newer version (e.g., 5.2.x > 5.2.2), only the following specific resource profiles are moved:
gpu-profile. Any other resource profiles that have been configured will not be moved during the upgrade process.
If you have configured custom resource profiles within Anaconda Enterprise, save your Config map before upgrading your cluster. They are not automatically included in the upgrade, so you’ll need to re-add them to the Config map after completing the upgrade process. Follow the instructions here for the steps to add custom resource profiles to the Config map.
Kernel parameters may be overwritten and cause networking errors¶
If networking starts to fail in Anaconda Enterprise, it may be because a kernel parameter related to networking was inadvertently overwritten.
On the master node running AE, run
gravity status and verify that all kernel parameters are set correctly. If the
Status for a particular parameter is
degraded, follow the instructions here to reset the kernel parameter.
Removing collaborator from project with open session generates error¶
If you remove a collaborator from a project while they have a session open for that project, they might see a
500 Internal Server Error message.
Add the user as a collaborator to the project, have them stop their notebook session, then remove them as a collaborator. For more information, see how to share a project.
To prevent collaborators from seeing this error, ask them to close their running session before you remove them from the project.
AE auth pod throws OutOfMemory Error¶
If you see an exception similar to the following, Anaconda Enterprise has exceeded the maximum heap size for the JVM:
Exception: java.lang.OutOfMemoryError thrown from the UncaughtExceptionHandler in thread "default task-248" 2018-08-29 23:13:26.327 UTC ERROR XNIO001007: A channel event listener threw an exception: java.lang.OutOfMemoryError: Java heap space (default I/O-36) [org.xnio.listener] 2018-08-29 23:12:32.823 UTC ERROR UT005023: Exception handling request to /auth/realms/AnacondaPlatform/protocol/openid-connect/token: java.lang.OutOfMemoryError: Java heap space (default task-86) [io.undertow.request] 2018-08-29 23:13:01.353 UTC ERROR XNIO001007: A channel event listener threw an exception: java.lang.OutOfMemoryError: Java heap space
Increase the JVM max heap size by doing the following:
anaconda-enterprise-ap-authdeployment spec by running the following command in a terminal:
$ kubectl edit deploy anaconda-enterprise-ap-auth
Increase the value for
spec: containers: - args: - cp /standalone-config/standalone.xml /opt/jboss/keycloak/standalone/configuration/ && /opt/jboss/keycloak/bin/standalone.sh -Dkeycloak.migration.action=import -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.file=/etc/secrets/keycloak/keycloak.json -Dkeycloak.migration.strategy=IGNORE_EXISTING -b 0.0.0.0 command: - /bin/sh - -c env: - name: DB_URL value: anaconda-enterprise-postgres:5432 - name: SERVICE_MIGRATE value: auth_quick_migrate - name: SERVICE_LAUNCH value: auth_quick_launch - name: JAVA_OPTS value: -Xms64m -Xmx2048m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m
Fetch changes behavior in Apache Zeppelin may not be obvious to new users¶
A Fetch changes notification appears, but the changes do not get applied to the editor. This is how Zeppelin works, but users unfamiliar with the editor may find it confusing.
If a collaborator makes changes to a notebook that’s also open by another user, the user needs to pull the changes that the collaborator made AND click the small reload arrows to refresh their notebook with the changes (see below).
Apache Zeppelin can’t locate conflicted files or non-Zeppelin notebook files¶
If you need to access files other than Apache Zeppelin notebooks within a project, you can use the
%sh interpreter from within a Zeppelin notebook to work with files via bash commands, or use the Settings tab to change the default editor to Jupyter Notebooks or JupyterLab and use the file browser or terminal.
Updating a package from the Anaconda metapackage¶
When updating a package dependency of a project, if that dependency is part of
the Anaconda metapackage the package will be installed once but a subsequent
anaconda-project call will uninstall the upgraded package.
When updating a package dependency remove the
anaconda metapackage from the
list of dependencies at the same time add the new version of the dependency that
you want to update.
5.1.0, 5.1.1, 5.1.2, 5.1.3
File size limit when uploading files¶
Unable to upload new files inside of a project that are larger than the current restrictions:
- The limit of file uploads in JupyterLab is 15 MB
5.1.0, 5.1.1, 5.1.2, 5.1.3
IE 11 compatibility issue when using Bokeh in projects (including sample projects)¶
Bokeh plots and applications have had a number of issues with Internet Explorer 11, which typically result in the user seeing a blank screen.
Upgrade to the latest version of Bokeh available. On Anaconda 4.4 the latest is 0.12.7. On Anaconda 5.0 the latest version of Bokeh is 0.12.13. If you are still having issues, consult the Bokeh team or support.
5.1.0, 5.1.1, 5.1.2, 5.1.3
IE 11 compatibility issue when downloading custom Anaconda installers¶
Unable to download a custom Anaconda installer from the browser when using Internet Explorer 11 on Windows 7. Attempting to download a custom installer with this setup will result in an error that “This page can’t be displayed”.
Custom installers can be downloaded by refreshing the page with the error message, clicking the “Fix Connection Error” button, or using a different browser.
5.1.0, 5.1.1, 5.1.2, 5.1.3
Project names over 40 characters may prevent JupyterLab launch¶
If a project name is more than 40 characters long, launching the project in JupyterLab may fail.
Rename the project to a name less than 40 characters long and launch the project in JupyterLab again.
5.1.1, 5.1.2, 5.1.3
Long-running jobs may falsely report failure¶
If a job (such as an installer, parcel, or management pack build) runs for more than 10 minutes, the UI may falsely report that the job has failed. The apparent job failure occurs because the session/access token in the UI has expired.
However, the job will continue to run in the background, the job run history will indicate a status of “running job” or “finished job”, and the job logs will be accessible.
To prevent false reports of failed jobs from occurring in the UI, you can extend the access token lifespan (default: 10 minutes).
To extend the access token lifespan, log in to the Anaconda Enterprise Authentication Center, navigate to Realm Settings > Tokens, then increase the Access Token Lifespan to be at least as long as the jobs being run (e.g., 30 minutes).
5.1.0, 5.1.1, 5.1.2, 5.1.3
New Notebook not found on IE11¶
On Internet Explorer 11, creating a new Notebook in a Classic Notebook editing session may produce the error “404: Not Found”. This is an artifact of the way that Internet Explorer 11 locates files.
If you see this error, click “Back to project”, then click “Return to Session”. This refreshes the file list and allows IE11 to find the file. You should see the new notebook in the file list. Click on it to open the notebook.
Disk pressure errors on AWS¶
If your Anaconda Enterprise instance is on Amazon Web Services (AWS), overloading the system with reads and writes to the directory
/opt/anaconda can cause disk pressure errors, which may result in the following:
- Slow project starts.
- Project failures.
- Slow deployment completions.
- Deployment failures.
If you see these problems, check the logs to verify whether disk pressure is the cause:
To list all nodes, run:
kubectl get node
Identify which node is experiencing issues, then run the following command against it, to view the log for that node:
kubectl describe node <master-node-name>
If there is disk pressure, the log will display an error message similar to the following:
To relieve disk pressure, you can add disks to the instance by adding another Elastic Block Store (EBS) volume. If the disk pressure is being caused by a back up, you can move the backed up file somewhere else (e.g., to an NFS mount). See Backing up and restoring AE for more information.
To add disks to the instance by adding another Elastic Block Store (EBS) volume.
Open the AWS console and add a new EBS volume provisioned to 3000 IOPS. A typical disk size is 500 GB.
Attach the volume to your AE 5 master.
To find your new disk’s name run
fdisk -l. Our example disk’s name is
/dev/nvme1n1. In the rest of the commands on this page, replace
/dev/nvme1n1with your disk’s name.
Format the new disk:
To create a new partition, at the first prompt press
nand then the return key.
Accept all default settings.
To write the changes, press
wand then the return key. This will take a few minutes.
To find your new partition’s name, examine the output of the last command. If the name is not there, run
fdisk -lagain to find it.
Our example partition’s name is
/dev/nvme1n1p1. In the rest of the commands on this page, replace
/dev/nvme1n1p1with your partition’s name.
Make a file system on the new partition:
Make a temporary directory to capture the contents of
Mount the new partition to
mount /dev/nvme1n1p1 /opt/aetmp
Shut down the Kubernetes system.
Find the gravity services:
systemctl list-units | grep gravity
You will see output like this:
# systemctl list-units | grep gravity gravity__gravitational.io__planet-master__0.1.87-1714.service loaded active running Auto-generated service for the gravitational.io/planet-master:0.1.87-1714 package gravity__gravitational.io__teleport__2.3.5.service loaded active running Auto-generated service for the gravitational.io/teleport:2.3.5 package
Shut down the
systemctl stop gravity__gravitational.io__teleport__2.3.5.service
Shut down the
systemctl stop gravity__gravitational.io__planet-master__0.1.87-1714.service
Copy everything from
rsync -vpoa /opt/anaconda/* /opt/aetmp
Include the new disk at the
/opt/anacondamount point by adding this line to your file systems table at
/dev/nvme1n1p1 /opt/anaconda ext4 defaults 0 0
Use mixed spaces and tabs in this pattern:
Move the old
/opt/anacondaout of the way to
mv /opt/anaconda /opt/anaconda-old
If you’re certain the
rsyncwas successful, you may instead delete
rm -r /opt/anaconda
Unmount the new disk from the
Make a new
Mount all the disks defined in
Restart the gravity services:
systemctl start gravity__gravitational.io__planet-master__0.1.87-1714.service systemctl start gravity__gravitational.io__teleport__2.3.5.service
Disk pressure error during backup¶
If a disk pressure error occurs while backing up your configuration, the amount of data being backed up has likely exceeded the amount of space available to store the backup files. This triggers the Kubernetes eviction policy defined in the
kubelet startup parameter and causes the backup to fail.
To check your eviction policy, run the following commands on the master node:
sudo gravity enter systemctl status | grep "/usr/bin/kubelet"
Restart the backup process, and specify a location with sufficient space (e.g., an NFS mount) to store the backup files. See Backing up and restoring AE for more information.
General diagnostic and troubleshooting steps¶
Entering Anaconda Enterprise environment
To enter the Anaconda Enterprise environment and gain access to
other commands within Anaconda Enterprise, use the command:
sudo gravity enter
Moving files and data
Occasionally you may need to move files and data from the host machine to the Anaconda Enterprise environment. If so, there are two shared mounts to pass data back and forth between the two environments:
/opt/anaconda/-> AE environment:
/var/lib/gravity/planet/share-> AE environment:
If data is written to either of the locations, that data will be available on both the host machine and within the Anaconda Enterprise environment
AWS Traffic needs to handle the public IPs and ports. You should either use a canonical security group with the proper ports opened or manually add the specific ports listed in Network Requirements.
“Cannot continue” error during install
This bug is caused by a previous failure of a kernel module check or other preflight check and subsequent attempt to reinstall.
Stop the install, make sure the preflight check failure is resolved, and restart the install again.
If an installation fails, you can view the failed logs as part of the support bundle in the failed installation UI.
sudo gravity enter you can check
troubleshoot a failed installation or these types of errors.
sudo gravity enter you can run
journalctl to look at
logs to troubleshoot a failed installation or these types of errors:
journalctl -u gravity-23423lkqjfefqpfh2.service
gravity-23423lkqjfefqpfh2.service with the name of your
You may see messages in
/var/log/messages related to errors such as
“etcd cluster is misconfigured” and “etcd has no leader” from one of the
installation jobs, particularly
gravity-site. This usually indicates that
etcd needs more compute power, needs more space or is on a slow disk.
Anaconda Enterprise is very sensitive to disk latency, so we usually recommend
using a better disk for
/var/lib/gravity on target machines and/or putting
etcd data on a separate disk. For example, you can mount
/var/lib/gravity/planet/etcd on the hosts.
After a failed installation, you can uninstall Anaconda Enterprise and start over with a fresh installation.
Failed on pulling gravitational/rbac
If the node refuses to install and fails on pulling gravitational/rbac, create
a new directory
TMPDIR before installing and provide write access
to user 1000.
Problems during air gap project migration
The command anaconda-project lock over-specifies the channel list resulting in a conda bug where it adds defaults from the internet to the list of channels.
Add to the .condarc: “default_channels”. This way, when conda adds “defaults” to the command it is adding the internal repo server and not the repo.continuum.io URLs.
default_channels: - anaconda channels: - our-internal - out-partners - rdkit - bioconda - defaults - r-channel - conda-forge channel_alias: https://:8086/conda auto_update_conda: false ssl_verify: /etc/ssl/certs/ca.2048.cer
Problems during post-install or post-upgrade steps
Post-install and post-upgrade steps run as Kubernetes jobs. When they complete running the pods used to run them are not removed. These and other stopped pods can be found using:
kubectl get pods -a
The logs in each of these three pods will be helpful for diagnosing issues in the following steps:
|Pod||Issues in this step|
Problems after post-install configuration
In order to reinitialize the post-install configuration UI, to regenerate temporary (self-signed) SSL certificates or reconfigure the platform based on your domain name, you must re-create and re-expose the service on a new port.
First, export the deployment’s resource manifest:
helm template --name anaconda-enterprise /var/lib/gravity/local/packages/unpacked/gravitational.io/AnacondaEnterprise/5.X.X/resources/Anaconda-Enterprise/ -x /var/lib/gravity/local/packages/unpacked/gravitational.io/AnacondaEnterprise/5.X.X/resources/Anaconda-Enterprise/templates/wagonwheel.yaml > wagon.yaml
image: ae-wagonwheel:5.X.X with
Then recreate the ae-wagonwheel deployment using the updated YAML file:
kubectl create -f /var/lib/gravity/site/packages/unpacked/gravitational.io/AnacondaEnterprise/5.X.X/resources/wagon.yaml -n kube-system
NOTE: Replace 5.X.X with your actual version number.
To ensure the deployment is running in the system namespace, execute
sudo gravity enter and run:
kubectl get deploy -n kube-system
One of these should be
ae-wagonwheel, the post-install configuration UI. To make this visible to the outside world, run:
kubectl expose deploy ae-wagonwheel --port=8000 --type=NodePort --name=post-install -n kube-system
This will run the UI on a new port, allocated by Kubernetes, under the name
To find out which port it is listening under, run:
kubectl get svc -n kube-system | grep post-install
Then navigate to
http://<your domain>:<this port> to access the post-install UI.
LDAP error in ap-auth
[LDAP: error code 12 - Unavailable Critical Extension]; remaining name 'dc=acme, dc=com'
This error can be caused when pagination is turned on. Pagination is a server side extension and is not supported by some LDAP servers, notably the Sun Directory server.
Session startup errors
If you need to troubleshoot session startup, you can use a terminal to view the
session startup logs. When session startup begins the output of the
anaconda-project prepare command is written to
and when the command completes the log is moved to